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Amendments to the Specification: 



Please replace the paragraph at page 44, lines 4-8, with the following amended paragraph: 

Similarly, a kernel command can invoke the kernel memory allocator 1330 for memory 
blocks used by kernel sub-systems. For example, as shown in Figure [[13]] H, the kernel 
memory allocator 1330 can handle requests to allocate small, variable-size buffers for network 
buffers 1340, process structures 1335, i-nodes and file descriptors 1336. The kernel memory 
allocator 1330 can also invoke Ihe page-level allocator 1310 for larger-size memory blocks. 

Please replace the paragraph at page 56, line 26, to page 57, line 1 1, with the following 
amended paragraph: 

Tt will be appreciated that the EOS can function in many parts of the kernel in accordance 
with the present invention. For example, in one embodiment of the present invention, a device 
driver interface is modified to ensure that data is encrypted and decrypted when exchanged 
between a computer system and attached peripheral devices. Figure 24 shows a computer 
system 2 1 00 using an EOS in accordance with the present invention. The computer system 2 1 00 
supports processes 21 10-21 1 3. Each process 21 10-21 1 3 is coupled to a system call interface 
[[2150]] 210L which can be invoked by each executing process 21 1 0-21 13 to read from and 
write to the devices tty 21 80, disk 2181 , and tape 21 82, as described below. The system call 
interface [[21 50]] 2101 couples to an I/O subsystem 2160, which in turn couples to a device 
driver interface 2170. The device driver interlace 2170 couples to (1) a tty driver 2175, which 
couples to a tly; (2) a disk driver 2176, which couples to one or more disks 2181; and (3) a tape 
driver 21 77, which couples to a tape 2182. The system call interface and I/O subsystem 2160 
form part of the kernel of an EOS. 

Please replace the paragraph at page 66, lines 6-1 3, with the following amended 
paragraph: 



Thus, for example, for exampl e ; still referring to Figure 31, data written to a backing store 
in accordance with the present invention is divided into portions corresponding to the data 3230. 
The encrypted data written to the backing store corresponds to the final encrypted data 3290. It 
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will be appreciated that the data portions that comprise the data to be stored are each input into 
the data encryption process 3200 and, based on the block number of the data block, is encrypted 
using an encryption key corresponding to the data block. Tt will also be appreciated that a 
process for decrypting an encrypted data block follows the reverse of the steps shown in Figure 
31. 
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